This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/m5e2ZDv7_-1udsvxigJbqqXmd_E.roa File: m5e2ZDv7_-1udsvxigJbqqXmd_E.roa (raw, json) Hash identifier: yOpoP5KeMEFEDYD+ejQW8hpR1s0gtVHvkYr8rcVTFC0= Subject key identifier: 9B:97:B6:64:3B:FB:FF:ED:6E:76:CB:F1:8A:02:5B:AA:A5:E6:77:F1 Certificate issuer: /CN=384ca9587a82fc3747f469e00945d9d5585a35b2 Certificate serial: 019B7F80C9A32F9B142929CB8D420C380DE8 Authority key identifier: 38:4C:A9:58:7A:82:FC:37:47:F4:69:E0:09:45:D9:D5:58:5A:35:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/m5e2ZDv7_-1udsvxigJbqqXmd_E.roa Signing time: Fri 02 Jan 2026 16:18:25 +0000 ROA not before: Fri 02 Jan 2026 16:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209810 IP address blocks: 194.50.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:c9:a3:2f:9b:14:29:29:cb:8d:42:0c:38:0d:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=384ca9587a82fc3747f469e00945d9d5585a35b2 Validity Not Before: Jan 2 16:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b97b6643bfbffed6e76cbf18a025baaa5e677f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:28:a8:38:70:64:ae:60:8c:44:d4:16:1e:f6: 09:07:7e:65:50:d9:e0:2d:db:ba:24:1d:20:99:39: 10:b9:fb:2c:5a:c9:db:d5:e6:c3:4a:4d:04:17:54: 44:ee:89:8b:7d:e7:e9:fd:00:16:a9:5c:db:ab:63: 89:39:60:24:66:ff:27:9a:11:0f:96:94:8c:ad:2f: fd:03:cc:fe:01:4c:fb:0d:7c:9e:17:0c:a1:df:b2: 45:69:bb:f8:52:b7:23:5e:85:93:79:5c:d0:10:40: 2e:f4:ae:66:96:6e:e7:c3:d3:79:38:3e:33:eb:75: 3f:10:28:1e:fd:6c:88:d3:d2:2d:ca:92:bd:4d:1c: 41:dd:3e:f9:be:12:58:66:60:c2:ca:61:7b:3c:ce: 70:2a:26:25:24:01:41:79:15:44:b2:7a:c0:e4:5d: 8d:51:32:bc:e5:6f:98:e7:64:14:9a:29:02:03:d5: e7:36:9c:f0:65:da:19:80:0e:5d:6b:f8:4f:d7:0a: aa:e7:4d:df:75:6e:b2:78:5c:9b:f0:4e:b6:0e:da: f3:8d:1f:df:1c:9f:d7:fb:e9:b9:02:ef:8f:6c:e6: a1:9e:1e:91:60:0e:90:6e:4d:4a:da:ae:37:89:46: de:24:06:e0:83:d1:96:41:aa:1b:cf:49:e9:93:f8: 01:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:97:B6:64:3B:FB:FF:ED:6E:76:CB:F1:8A:02:5B:AA:A5:E6:77:F1 X509v3 Authority Key Identifier: keyid:38:4C:A9:58:7A:82:FC:37:47:F4:69:E0:09:45:D9:D5:58:5A:35:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/m5e2ZDv7_-1udsvxigJbqqXmd_E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.50.228.0/22 Signature Algorithm: sha256WithRSAEncryption 06:62:7d:ea:1b:af:c7:5d:85:68:c2:14:35:06:5b:c3:8b:0b: 7c:03:fb:df:10:07:64:de:eb:a2:19:c3:34:eb:80:b9:0e:0b: e4:eb:5d:05:54:a0:5b:4a:13:1b:41:b6:07:5e:e5:a0:f5:b6: 6c:0a:8d:71:a3:e6:c9:59:e3:cd:45:e7:7d:ef:64:da:b9:47: 2f:10:51:81:27:dc:34:91:84:7e:da:c8:f0:76:69:e4:38:51: cf:e7:3b:81:72:a2:96:83:37:5d:86:3d:9f:9a:77:7d:7a:ea: 82:cc:e3:c9:e9:77:d1:47:4f:9d:ff:7b:40:27:c1:5f:3c:7d: 83:7b:7a:23:7f:f2:13:ea:45:9c:f4:9f:93:d4:f4:ed:c1:e2: c2:20:d1:61:a2:8c:17:c9:ca:05:ff:1d:55:ab:0a:f9:32:8e: 3a:83:75:cf:9f:7c:d8:c7:6e:12:79:c9:46:46:d3:f0:9c:f7: 08:cd:1f:03:50:1e:63:30:ef:ae:e9:2c:e4:32:25:0f:24:2b: 32:4c:9a:05:72:c5:2a:1a:04:3d:51:ba:0c:b9:c4:d8:ca:3a: 58:d3:d8:a4:1a:59:d7:3d:db:bb:80:5c:b1:fa:70:22:36:53: 40:fe:13:17:97:04:aa:15:3e:9d:32:48:04:d0:c3:66:ce:74: 2c:33:75:34 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gMmjL5sUKSnLjUIMOA3oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4NGNhOTU4N2E4MmZjMzc0N2Y0NjllMDA5NDVkOWQ1NTg1 YTM1YjIwHhcNMjYwMTAyMTYxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Yjk3YjY2NDNiZmJmZmVkNmU3NmNiZjE4YTAyNWJhYWE1ZTY3N2YxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiioOHBkrmCMRNQWHvYJB35lUNng Ldu6JB0gmTkQufssWsnb1ebDSk0EF1RE7omLfefp/QAWqVzbq2OJOWAkZv8nmhEP lpSMrS/9A8z+AUz7DXyeFwyh37JFabv4UrcjXoWTeVzQEEAu9K5mlm7nw9N5OD4z 63U/ECge/WyI09ItypK9TRxB3T75vhJYZmDCymF7PM5wKiYlJAFBeRVEsnrA5F2N UTK85W+Y52QUmikCA9XnNpzwZdoZgA5da/hP1wqq503fdW6yeFyb8E62DtrzjR/f HJ/X++m5Au+PbOahnh6RYA6Qbk1K2q43iUbeJAbgg9GWQaobz0npk/gBFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJuXtmQ7+//tbnbL8YoCW6ql5nfxMB8GA1UdIwQY MBaAFDhMqVh6gvw3R/Rp4AlF2dVYWjWyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0V5cFdIcUNfRGRIOUduZ0NVWFoxVmhhTmJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9hMTk2NTQtYWRlYy00Mzk3LThlYjAt MTdhZDJmMDFjMDA5LzEvbTVlMlpEdjdfLTF1ZHN2eGlnSmJxcVhtZF9FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9hMTk2NTQtYWRlYy00Mzk3LThlYjAtMTdhZDJmMDFjMDA5 LzEvT0V5cFdIcUNfRGRIOUduZ0NVWFoxVmhhTmJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwjLkMA0G CSqGSIb3DQEBCwUAA4IBAQAGYn3qG6/HXYVowhQ1BlvDiwt8A/vfEAdk3uuiGcM0 64C5Dgvk610FVKBbShMbQbYHXuWg9bZsCo1xo+bJWePNRed972TauUcvEFGBJ9w0 kYR+2sjwdmnkOFHP5zuBcqKWgzddhj2fmnd9euqCzOPJ6XfRR0+d/3tAJ8FfPH2D e3ojf/IT6kWc9J+T1PTtweLCINFhoowXycoF/x1Vqwr5Mo46g3XPn3zYx24SeclG RtPwnPcIzR8DUB5jMO+u6SzkMiUPJCsyTJoFcsUqGgQ9UboMucTYyjpY09ikGlnX Pdu7gFyx+nAiNlNA/hMXlwSqFT6dMkgE0MNmznQsM3U0 -----END CERTIFICATE-----Generated at Tue Jan 27 04:23:11 2026 by rpki-client